Go/google.golang.org/grpc: unknown
Private tokens could appear in logs if context containing gRPC metadata is logged in google.golang.org/grpc
Action: Upgrade google.golang.org/grpc to 1.64.1 or later.
go get google.golang.org/grpc@v1.64.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.64.0 | 1.64.1 | - |
Fixed versions
| 1.64.1 |
Sources
- osv: GO-2024-2978
- https://github.com/grpc/grpc-go/security/advisories/GHSA-xr7q-jx4m-x55m
- https://github.com/grpc/grpc-go/commit/ab292411ddc0f3b7a7786754d1fe05264c3021eb
published · modified · JSON